Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fjSwg80KR4xFbmleSiiM6b9js9k.roa
File: fjSwg80KR4xFbmleSiiM6b9js9k.roa (raw, json)
Hash identifier: TzukAIKH7nl0lUDP1a1fYGdrjehrEWtHlZroGe9HIpE=
Subject key identifier: 7E:34:B0:83:CD:0A:47:8C:45:6E:69:5E:4A:28:8C:E9:BF:63:B3:D9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0AA4
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fjSwg80KR4xFbmleSiiM6b9js9k.roa
Signing time: Sun 30 Jun 2024 01:54:25 +0000
ROA not before: Sun 30 Jun 2024 01:54:25 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.67.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:54:25 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=7E34B083CD0A478C456E695E4A288CE9BF63B3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:24:39:72:76:95:5e:c6:8f:e5:da:48:f4:
ba:57:6d:25:b7:de:fb:9a:a2:f6:2c:9c:b7:e9:85:
2a:d4:99:85:fc:be:07:66:96:28:1e:0e:d6:ff:32:
6e:41:63:ae:42:b6:39:19:44:07:73:32:3b:16:17:
64:d0:37:83:f8:4a:3a:0a:90:90:0c:ad:94:f9:42:
ac:16:a1:51:80:5c:c2:c0:94:7d:ea:23:11:24:0e:
7b:4b:ec:26:a4:85:88:65:a7:02:7f:ff:89:da:a5:
7b:c6:a8:b6:89:d3:5e:8a:e0:48:f7:69:ee:da:e5:
e8:53:8e:d4:1e:69:96:d0:0b:c5:02:cb:74:8e:a1:
6e:29:8a:43:42:08:c3:27:ff:8e:5b:cb:a2:f3:f9:
c7:21:ba:16:be:47:f1:fe:28:39:03:66:93:7f:f2:
8d:17:21:ad:e2:20:be:35:d7:3e:a2:dc:ec:70:bb:
bd:39:0f:b1:42:94:6f:61:ea:95:86:6f:2d:b1:da:
30:f2:fe:02:01:d2:d7:8f:ad:b5:3a:f5:f7:d2:bc:
36:f4:fd:90:55:fc:39:76:7b:1a:0b:9c:14:3b:fe:
1c:cb:7b:3f:20:fa:26:87:87:19:7d:d7:53:c4:56:
fd:64:65:1c:85:25:2a:b8:82:67:9f:a7:e1:7f:b3:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:B0:83:CD:0A:47:8C:45:6E:69:5E:4A:28:8C:E9:BF:63:B3:D9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fjSwg80KR4xFbmleSiiM6b9js9k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:8f:e9:5c:64:5c:27:e2:bd:22:2a:65:42:8c:45:b7:b2:7b:
ac:db:9a:85:80:b9:2e:44:14:05:d8:13:fc:8b:f1:51:be:bd:
38:31:59:62:d2:c1:18:96:29:a7:82:95:0e:84:24:b2:35:d3:
87:91:8f:76:cc:07:9e:7b:7c:8c:e5:97:93:57:42:95:e7:52:
6a:59:2b:fe:f2:62:da:21:4a:28:f2:33:97:af:fe:90:d5:53:
78:64:3f:84:1d:0f:53:17:91:ee:12:e6:ea:3c:3f:61:d2:15:
cc:a5:4e:96:0a:ae:6c:54:1b:71:f0:ee:93:64:56:6e:52:3a:
b6:ea:f1:60:48:d0:36:26:cb:2c:22:60:8b:ae:32:39:ed:89:
3d:d2:34:0b:4c:88:30:9e:48:1a:a4:db:07:3e:d9:b5:b2:ec:
ed:ce:e8:2f:b2:8e:77:9c:29:40:b0:3f:15:06:c3:fc:c4:03:
46:05:8e:58:71:e6:45:af:df:53:7e:20:4f:08:5f:cc:37:26:
cf:23:59:ca:60:16:65:95:a0:94:4a:db:b4:af:a5:eb:57:d2:
e7:33:af:2c:cb:3c:e8:17:f5:38:03:da:b9:9b:fc:73:b3:be:
b7:a3:9d:1b:04:8c:7e:31:5a:2d:27:41:80:46:bf:0b:b2:90:
f5:9c:33:99
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA2MzAw
MTU0MjVaFw0yNTA2MjQxMDQ2NDVaMDMxMTAvBgNVBAMTKDdFMzRCMDgzQ0QwQTQ3
OEM0NTZFNjk1RTRBMjg4Q0U5QkY2M0IzRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRryQ5cnaVXsaP5dpI9LpXbSW33vuaovYsnLfphSrUmYX8vgdm
ligeDtb/Mm5BY65CtjkZRAdzMjsWF2TQN4P4SjoKkJAMrZT5QqwWoVGAXMLAlH3q
IxEkDntL7CakhYhlpwJ//4napXvGqLaJ016K4Ej3ae7a5ehTjtQeaZbQC8UCy3SO
oW4pikNCCMMn/45by6Lz+cchuha+R/H+KDkDZpN/8o0XIa3iIL411z6i3Oxwu705
D7FClG9h6pWGby2x2jDy/gIB0tePrbU69ffSvDb0/ZBV/Dl2exoLnBQ7/hzLez8g
+iaHhxl911PEVv1kZRyFJSq4gmefp+F/s923AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfjSwg80KR4xFbmleSiiM6b9js9kwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2ZqU3dnODBLUjR4RmJtbGVTaWlNNmI5anM5ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUBQ6AwDQYJKoZIhvcNAQELBQADggEBAD6P6VxkXCfivSIqZUKMRbeye6zb
moWAuS5EFAXYE/yL8VG+vTgxWWLSwRiWKaeClQ6EJLI104eRj3bMB557fIzll5NX
QpXnUmpZK/7yYtohSijyM5ev/pDVU3hkP4QdD1MXke4S5uo8P2HSFcylTpYKrmxU
G3Hw7pNkVm5SOrbq8WBI0DYmyywiYIuuMjntiT3SNAtMiDCeSBqk2wc+2bWy7O3O
6C+yjnecKUCwPxUGw/zEA0YFjlhx5kWv31N+IE8IX8w3Js8jWcpgFmWVoJRK27Sv
petX0uczryzLPOgX9TgD2rmb/HOzvrejnRsEjH4xWi0nQYBGvwuykPWcM5k=
-----END CERTIFICATE-----
Generated at Mon Apr 14 10:55:24 2025 by rpki-client